]> git.ipfire.org Git - thirdparty/knot-resolver.git/commitdiff
docs: update link to IANA web with DNSSEC root TA
authorPetr Špaček <petr.spacek@nic.cz>
Tue, 23 Jan 2018 14:20:01 +0000 (15:20 +0100)
committerPetr Špaček <petr.spacek@nic.cz>
Tue, 23 Jan 2018 14:54:35 +0000 (15:54 +0100)
daemon/README.rst
daemon/lua/trust_anchors.lua.in

index 1c2a21f6820e89526697c30e9897ba292e7da600..c3dc6e3179e1b24f91d8b458e64327a5a8fc19f6 100644 (file)
@@ -22,8 +22,8 @@ To enable it, you need to provide trusted root keys. Bootstrapping of the keys i
    $ kresd -k root-new.keys # File for root keys
    [ ta ] keyfile 'root-new.keys': doesn't exist, bootstrapping
    [ ta ] Root trust anchors bootstrapped over https with pinned certificate.
-          You may want to verify them manually, as described on:
-          https://data.iana.org/root-anchors/old/draft-icann-dnssec-trust-anchor.html#sigs
+          You SHOULD verify them manually against original source:
+          https://www.iana.org/dnssec/files
    [ ta ] Current root trust anchors are:
    . 0 IN DS 19036 8 2 49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5
    . 0 IN DS 20326 8 2 E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D
index 78c990c2b96c19f0b8848c8e213b35a92e7df52a..7c9e27dad61be687dbbd09132a459368d5457aad 100644 (file)
@@ -42,8 +42,8 @@ local function bootstrap(url, ca)
                return false, string.format('[ ta ] failed to get any record from "%s"', url)
        end
        local msg = '[ ta ] Root trust anchors bootstrapped over https with pinned certificate.\n'
-                        .. '       You may want to verify them manually, as described on:\n'
-                        .. '       https://data.iana.org/root-anchors/old/draft-icann-dnssec-trust-anchor.html#sigs\n'
+                        .. '       You SHOULD verify them manually against original source:\n'
+                        .. '       https://www.iana.org/dnssec/files\n'
                         .. '[ ta ] Current root trust anchors are:'
                         .. rr
        return rr, msg